PaloAlto fixes CVE-2024-8686 and CVE-2024-8687

Palo Alto released patches to address several vulnerabilities discovered in their products, if exploited, could allow unauthorized access, data breaches, and disruption of services. A range of vulnerabilities affecting various Palo Alto Networks products, including PAN-OS, GlobalProtect, Cortex XDR, and others. The most critical vulnerabilities are CVE-2024-8686 and CVE-2024-8687. CVE-2024-8686: Command Injection Vulnerability in PAN-OS with a […]

Gitlab fixes CVE-2024-8312 and CVE-2024-6826

thecyberthrone.in - 25/Oct 08:17

GitLab has released patches for two vulnerabilities affecting multiple versions of its Community Edition (CE) and Enterprise Edition (EE) software....

Cisco released patches for critical vulnerabilities in FMC FTD and ASA Products

thecyberthrone.in - 24/Oct 12:12

Cisco has released multiple advisories and patches for vulnerabilities for in its product portfolios FMC The first vulnerability tracked as...

Cisco fixed tens of vulnerabilities, including an actively exploited one

securityaffairs.co - 24/Oct 15:58

Cisco patched vulnerabilities in ASA, FMC, and FTD products, including one actively exploited in a large-scale brute-force attack campaign. Cisco...

ServiceNow fixes CVE-2024-8923 and CVE-2024-8924

thecyberthrone.in - 31/Oct 17:07

ServiceNow has addressed two significant vulnerabilities, CVE-2024-8923 and CVE-2024-8924, which could enable unauthorized remote access, potentially...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

itsecuritynews.info - 16:34

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-8957...

CISA Adds One Known Exploited Vulnerability to Catalog

itsecuritynews.info - 23/Oct 19:32

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation, as confirmed by...

Spring Security fixes Critical Vulnerability CVE-2024-38821

thecyberthrone.in - 29/Oct 08:30

Spring Security has disclosed a critical vulnerability impacting WebFlux applications, enables an authorization bypass under specific conditions. If...

Google fixes CVE-2024-10487 and CVE-2024-10488 in latest Chrome version

thecyberthrone.in - 30/Oct 08:20

Google has released updates to address two vulnerabilities in the Chrome browser that could potentially allow attackers to take control of...

U.S. CISA adds Microsoft SharePoint flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 23/Oct 13:49

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft SharePoint flaw to its Known Exploited Vulnerabilities catalog. The U.S....

Siemens fixes Critical Vulnerability CVE-2024-47901

thecyberthrone.in - 27/Oct 16:50

Siemens has released patches for multiple vulnerabilities in its InterMesh wireless alarm reporting system that could allow an unauthenticated, remote...

Rubriques :